$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/2WcMDOH7O8CA-hp1GqPpdPNPLlE.roa File: 2WcMDOH7O8CA-hp1GqPpdPNPLlE.roa (raw, json) Hash identifier: LCFDfwicccczbFzkbvdrugrlRHzNopd5qSv8Zdyb1Ts= Subject key identifier: D9:67:0C:0C:E1:FB:3B:C0:80:FA:1A:75:1A:A3:E9:74:F3:4F:2E:51 Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Certificate serial: 0D0E Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/2WcMDOH7O8CA-hp1GqPpdPNPLlE.roa Signing time: Mon 15 Jan 2024 21:24:29 +0000 ROA not before: Mon 15 Jan 2024 21:24:29 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 17709 IP address blocks: 2404::/26 maxlen: 48 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 May 2024 20:29:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3342 (0xd0e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Validity Not Before: Jan 15 21:24:29 2024 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=D9670C0CE1FB3BC080FA1A751AA3E974F34F2E51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:5c:2d:79:03:10:e4:39:6b:a3:99:ec:d8:72: 28:2d:73:b2:cf:85:ae:c8:ea:78:6c:2c:26:20:02: 00:a1:3f:85:d4:eb:2f:b2:78:d2:b8:8f:72:29:e3: 94:de:5c:9e:79:63:2c:65:94:70:bc:92:f5:5a:bd: 2f:46:db:7f:9c:ea:8e:67:7d:a9:2c:87:80:61:d4: 91:77:02:ad:f6:f1:a1:ca:04:31:70:aa:46:10:d4: 9f:ae:f0:15:f1:a8:51:8b:ef:12:83:89:d6:76:26: 7e:ed:54:31:be:75:22:0c:f7:3d:3b:1f:39:1d:d8: 63:62:04:74:1a:6c:34:be:2c:db:17:af:8f:ed:db: d4:7a:c6:5e:2e:66:54:32:ae:6d:39:4c:62:07:dd: 57:87:0d:bf:0c:be:d3:6b:33:f4:2b:35:bf:01:84: eb:37:86:cb:dc:a3:e1:1e:4a:4d:2b:7a:da:74:41: af:b8:ee:12:54:e5:80:eb:3e:9e:3a:a9:1a:ca:c1: e3:49:b5:7e:f6:60:16:5a:e2:d9:92:8b:9b:38:4e: 32:06:2c:5f:71:72:56:f2:6a:8b:9c:94:de:47:60: 15:ba:0b:99:86:3e:ff:bc:bd:e4:e2:36:f2:05:79: 0b:ba:72:fc:4c:2e:69:d0:10:e4:75:d3:52:65:56: 7e:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:67:0C:0C:E1:FB:3B:C0:80:FA:1A:75:1A:A3:E9:74:F3:4F:2E:51 X509v3 Authority Key Identifier: keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/2WcMDOH7O8CA-hp1GqPpdPNPLlE.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2404::/26 Signature Algorithm: sha256WithRSAEncryption 3e:05:08:8b:9d:ac:4e:1f:6c:7f:4a:15:94:34:d4:37:41:94: d0:3e:91:2c:29:5c:7b:ee:ee:d6:44:5b:4f:d0:e6:51:65:ad: 45:6a:c9:b1:08:01:54:a0:52:12:46:ae:42:3c:9c:60:2c:ac: 0d:7c:d8:4a:7f:1c:bb:63:67:a2:6d:20:ce:07:c9:56:bb:a1: ac:68:22:94:1f:5d:0e:35:0a:a5:8d:0a:9d:26:43:83:d2:03: c7:23:1c:a0:4f:a9:37:b4:7b:d1:67:11:a5:08:25:03:c0:03: e3:f3:60:fe:c6:ce:9a:43:d2:49:f8:7e:1f:05:da:cf:27:6c: 64:b0:6b:d5:97:b1:0b:8e:59:cf:a0:00:4f:16:e7:2c:4b:81: f4:1d:50:2a:ba:68:b2:e6:65:a2:d5:cd:32:68:aa:8a:f3:70: 06:6a:6a:5a:a9:44:30:81:d9:c0:a2:fa:0e:1c:6b:54:0b:ab: f6:80:e5:e1:6d:b0:35:7d:49:f3:0b:27:59:b9:34:d3:1f:d4: 03:fb:c3:1b:17:f7:ac:b1:b1:f2:95:bc:7f:78:04:1b:76:2f: a7:8a:63:c1:20:9a:8f:17:5b:49:f3:8c:5e:8c:65:90:24:c0: fe:9c:64:ee:5d:37:a5:06:44:75:cb:5a:fa:05:02:ff:79:6b: 29:e4:f0:e1 -----BEGIN CERTIFICATE----- MIIEzTCCA7WgAwIBAgICDQ4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0U2 M0E1ODdENUU3MUZCQkQ4QzgxRUMzNEZFNTM2NkFDNjkxQUI1MTAeFw0yNDAxMTUy MTI0MjlaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKEQ5NjcwQzBDRTFGQjNC QzA4MEZBMUE3NTFBQTNFOTc0RjM0RjJFNTEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC3XC15AxDkOWujmezYcigtc7LPha7I6nhsLCYgAgChP4XU6y+y eNK4j3Ip45TeXJ55YyxllHC8kvVavS9G23+c6o5nfaksh4Bh1JF3Aq328aHKBDFw qkYQ1J+u8BXxqFGL7xKDidZ2Jn7tVDG+dSIM9z07Hzkd2GNiBHQabDS+LNsXr4/t 29R6xl4uZlQyrm05TGIH3VeHDb8MvtNrM/QrNb8BhOs3hsvco+EeSk0retp0Qa+4 7hJU5YDrPp46qRrKweNJtX72YBZa4tmSi5s4TjIGLF9xclbyaouclN5HYBW6C5mG Pv+8veTiNvIFeQu6cvxMLmnQEOR101JlVn5hAgMBAAGjggHpMIIB5TAdBgNVHQ4E FgQU2WcMDOH7O8CA+hp1GqPpdPNPLlEwHwYDVR0jBBgwFoAUPmOlh9XnH7vYyB7D T+U2asaRq1EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1Bt T2xoOVhuSDd2WXlCN0RULVUyYXNhUnExRS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev UG1PbGg5WG5IN3ZZeUI3RFQtVTJhc2FScTFFLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvRkVULzJXY01ET0g3TzhDQS1ocDFHcVBwZFBO UExsRS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQYkBAAAMA0G CSqGSIb3DQEBCwUAA4IBAQA+BQiLnaxOH2x/ShWUNNQ3QZTQPpEsKVx77u7WRFtP 0OZRZa1FasmxCAFUoFISRq5CPJxgLKwNfNhKfxy7Y2eibSDOB8lWu6GsaCKUH10O NQqljQqdJkOD0gPHIxygT6k3tHvRZxGlCCUDwAPj82D+xs6aQ9JJ+H4fBdrPJ2xk sGvVl7ELjlnPoABPFucsS4H0HVAqumiy5mWi1c0yaKqK83AGampaqUQwgdnAovoO HGtUC6v2gOXhbbA1fUnzCydZuTTTH9QD+8MbF/essbHylbx/eAQbdi+nimPBIJqP F1tJ84xejGWQJMD+nGTuXTelBkR1y1r6BQL/eWsp5PDh -----END CERTIFICATE-----Generated at Mon May 20 08:32:39 2024 by rpki-client on console-fra.rpki-client.org